Computer Network User Behaviour Visualisation Using Self Organising Maps
نویسندگان
چکیده
Computer systems are vulnerable to abuse by insiders and to penetration by outsiders. The amount of monitoring data generated in computer networks is enormous. Tools are needed to ease the work of system operators. Anomaly detection attempts to recognise abnormal behaviour to detect intrusions. A prototype Anomaly Detection System has been constructed. The system provides means for automatic anomaly detection and user behaviour visualisation. The system consists of a data gathering component, a user behaviour visualisation component, an automatic anomaly detection component and a user interface. This paper is focused on the user behaviour visualisation component. This component uses large Self Organising Maps as a basis. The construction and the usage of the component is presented. Some discussion on comments from the test usage of the Anomaly Detection System is also provided.
منابع مشابه
Visualising Class Distribution on Self-organising Maps
The Self-Organising Map is a popular unsupervised neural network model which has been used successfully in various contexts for clustering data. Even though labelled data is not required for the training process, in many applications class labelling of some sort is available. A visualisation uncovering the distribution and arrangement of the classes over the map can help the user to gain a bett...
متن کاملSky-Metaphor Visualisation for Self-Organising Maps
Self-Organising Maps are utilised in many data mining and knowledge management applications. Although various visualisations have been proposed for SOM, these techniques lack in distinguishing between the items mapped to the same unit. Here we present a novel technique for the visualisation of Self-Organising Maps that displays inputs not in the centre of the map units, but shifts them towards ...
متن کاملComponent Selection for the Metro Visualisation of the Self-Organising Map
Self-Organising Maps have been used for a wide range of clustering applications. They are wellsuited for various visualisation techniques to offer better insight into the clusterings. A particularly feasible visualisation is the plotting of single components of a data set and their distribution across the SOM. One central problem of the visualisation of Component Planes is that a single plot is...
متن کاملVisualisation of gait data with Kohonen self-organising neural maps.
Self-organising artificial neural networks were used to reduce the complexity of joint kinematic and kinetic data, which form part of a typical instrumented gait assessment. Three-dimensional joint angles, moments and powers during the gait cycle were projected from the multi-dimensional data space onto a topological neural map, which thereby identified gait stem-patterns. Patients were positio...
متن کاملMulti-Modal Music Information Retrieval - Visualisation and Evaluation of Clusterings by Both Audio and Lyrics
Navigation in and access to the contents of digital audio archives have become increasingly important topics in Information Retrieval. Both private and commercial music collections are growing both in terms of size and acceptance in the user community. Content based approaches relying on signal processing techniques have been used in Music Information Retrieval for some time to represent the ac...
متن کامل